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(57) Abstract: A method for provision of access for a data requesting entity (IRE) to data related to a principal is disclosed, com- 
posing the steps of (i) creating an access granting ticket comprising an access specification specifying a permission for an access 
to data related to the principal, said data being available at a data providing entity (IPE1), and a principal identifier representing 
the principal towards the data providing entity (IPEl), (ii) encrypting the access granting ticket with an encryption key of the data 
providing entity (TPE1), (iii) communicating to the data requesting entity (IRE) the encrypted access granting ticket accompanied 
by an identifier of the data providing entity (IPE1), (iv) communicating from the data requesting entity (IRE) to the data providing 
entity (IPE1) a request comprising the encrypted access granting ticket, (v) decrypting the encrypted access granting ticket with a 
decryption key of the data providing entity (IPE1) corresponding to the encryption key, (vi) providing to the data requesting entity 
(IRE) access to data related to the principal identifier according to the access specification. 
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